Zscaler Zero Trust Exchange Platform Reviews

We use the solution to build zero-trust networks. We use it to block everything except the trusted URLs. We get a bunch of URLs from the customers, whitelist them in the solution, and everything else is blocked automatically.

An URL must be whitelisted for users to access it. When a customer tells us they need a particular URL, we analyze it and send it for approval. Once it is approved, we whitelist the URL for the user. The solution is useful for zero-trust and DLP.

The UI is easy to use. All the options are accessible.

The product has limited features. We only have the option to monitor URLs and HTTPS logs. The tool must provide IP-blocking features.

I have been using the solution for more than three years.

The tool is stable. For the past three years, I haven't seen it break down. I rate the stability a ten out of ten.

I rate the tool’s scalability a seven out of ten. When we search for logs, it doesn’t take much time. It’s quite fast, even if we have a lot of logs. We use more than 1000 URLs in a day. Getting the logs in real-time is quite important. Four of our customers are using the solution. We have 30,000 to 40,000 users.

I have used Symantec DLP.

The engineering team sets up the tool. We use the tool to analyze user behavior during incidents. We can see whether URLs accessed by the users were approved by the organization.

The product is a bit expensive.

We take support from Zscaler and provide the service to our clients. We are partners. People who want to use the product must explore the options. We can do multiple things for a single URL. We can restrict URLs to only access the GET request or POST request. We can do HTTP control and SSL inspection. We can also access the threat intel. We can look up a URL and get the details in real-time. Overall, I rate the tool an eight out of ten.

The main purpose was to use it as a zero-trust solution. Or also to have control over the inbound and outbound traffic coming and going through the end user's device.

It does the job. What it is needed for. I can use it for VPN, I can use it for secure connections, I can use it as a firewall. So the solution does the job.

It has a limitation, if you are creating a rule or something for a web application or something, you could only add five users, not more than that. Five or four users are only included in a rule. If you want to create a rule for more than five or four users, you have to go through other methods, not particularly with the application. Working within the application with this method would be quite easy as compared to listing a URL or a normal IP address.

I have been using this solution for one and a half year. 

It is a stable product.

It is a scalable solution. Around 300 end users are using this solution.

The customer service and support have a good SLA. They return queries on time.  

Positive

I would say go ahead because it has a quite friendly interface. It has a lot of stuff you can do. If you are using the old infrastructure technique, you would love it because you can control most of your endpoints network on the device by a single interface. That is the Zscaler.

Overall, I would rate the solution an eight out of ten. 

The tool is a proxy service that provides inspection of URL filtering for internet access. We have probably 20 or 30 different vendors that we work with in regards to carriers. These are all providers that we use that work in conjunction with that platform. It's an agent that's installed on all of our endpoints. We whitelist and blacklist and we allow certain websites, et cetera, using this product.

Overall, the solution does a pretty good job at web filtering.

The solution does a good job of allowing us to choose what to whitelist and blacklist.

The agent easily installs on the endpoints.

The solution needs to offer better scalability.

The product needs SAML integration. That's something they should work to add in future releases.

It needs to offer SSO, single sign-on, and items of that nature.

The product needs greater zero-trust. They need to focus more on zero-trust relationships.

I have been using the solution for about three and a half years at this point. It's been a while. 

The scalability is a weak point right now. Its scaling capabilities are lacking, and we'd like to see that improve in the future.

The solution is basically an agent that is installed on endpoints in order to provide security. It's not overly complicated.

We are not using the latest version of the solution. Currently, for example, we are one version back on that, as we don't typically do the most current version.

I'd rate the solution at a nine out of ten. We've, for the most part, been quite happy with its capabilities and the level of security it provides to us.

When I am outside of the company, I use Zscaler Private Access. I use Zscaler Private Access in the home, hotel, or wherever for remote working. It is a VPN.

We have a minimum of three to five thousand users minimum supported with Zscaler Private Access. It could be much more. They use it in the same way that I am using it. 

We have more solutions for connection with third party suppliers where we include contacts.

The only advantage I see is no more connection is required by the users. It is attached to the single-side logon with our key directory. That is the most valuable feature. 

With AT&T, we had another way to connect with the user. We had no single-side logon solution. Zscaler Private Access is a single-side logon solution.

We don't need to connect anymore. It is automatically connected when you log on in Windows. That is the only advantage I see because it is a bit slower.

We are supporting our supply-chain in India. Our connections through Zscaler have degraded drastically. Improvements are required in speed and bandwidth. 

The biggest disadvantage is there are no SCMP network layers available. The older network connection checks cannot be done because it's not included in the solution. 

We are programming our old solutions and they have not included support for legacy Windows. This is a huge disadvantage for me.

SCMP support would be one of the biggest improvements in my opinion. More speed improvements are also required. Very simple. 

If I need to monitor a third party supplier, if I have no SCMP, I cannot do the monitoring.

Some data may be cached if it is not available. This another important issue we have which needs to be improved, i.e. when the availability is not given the cache should not be used. 

At least we need Zscaler Private Access to make sure that the cache represents what is available to the users.

I am not involved in technical support for Zscaler Private Access. I create a ticket in our technical system and wait for an answer. I am still a project leader for this.

Everything is predefined so there is no mistake possible. Zscaler Private Access is attached to the active directory user. It is very easy. It is good.

We deployed with a system and it went very quick. It's a cloud solution. There is no private software to set up. Zscaler Private Access is quite easy and convenient in this way.

The installation was done at the global level. We did not use a reseller. Our company has since been merged with another corporation. We have now ninety thousand employees.

I was not involved in the choice of the solution. This was decided by our global network people.

On a scale from one to ten, I would rate Zscaler Private Access at only a three or four. 

The biggest disadvantage is the lack of SCMP network systems.  Also, the quality of the bandwidth is limited. We use normal internet access, not a fiber-optic line. 

The difference is huge, like flying in first-class vs. economy class. We stay in the economy class. The commercial company is saving money, but the end-user has lost the experience.

I primarily use it for conducting security incident investigations and generating security reports. It serves as a valuable tool in analyzing and responding to security events, and its capabilities are instrumental in producing comprehensive reports on the security status of the network.

It proved to be invaluable in addressing our challenge of not having a rigid perimeter. With employees working from various locations, the need to move away from VPN reliance became apparent. Following thorough assessments, we opted to continue using it as our cloud Web Access solution.

It stands out for its seamless integration with various security solutions, such as EDR, SOAR, etc. The implementation process is straightforward, requiring minimal ongoing maintenance. The desktop agent enhances endpoint protection against zero-day vulnerabilities, providing a safeguard until patches are released. Its adaptability extends beyond a single solution, allowing integration with different models and solutions. The alert detection system and additional security features add an extra layer of appeal. The flexibility to start with one aspect and expand within a single vendor is advantageous. The agent's versatility is notable, used for digital experience monitoring to collect valuable endpoint metrics for troubleshooting. The security browser function distinguishes between known safe sites and potentially suspicious ones, ensuring a secure browsing experience. Unfamiliar websites are run in the Zscaler Cloud, isolating them from the endpoint and preventing potential phishing or malicious scripts from reaching the user's device.

Occasionally, there are certain delays in report generation. Clicking on a link, I found myself waiting for an unpredictable duration—sometimes as long as thirty seconds to a minute—until the report was ready.

I have been working with it for over a year.

There have been instances where certain software or applications on the user side didn't work smoothly. This posed an additional onboarding challenge, requiring collaboration with technical support to analyze logs, generate reports, and identify necessary exclusions or policies to rectify the issue. Once addressed, the applications resumed normal functioning.

It's highly scalable, and I frequently receive notifications about new data center expansions. With around five thousand endpoints, I am not aware of any problems that have been discussed as requiring a change of solution.

I gained access to the web console, and within an hour, I comprehended its capabilities, which I found appealing. Beyond predefined reports, the platform enables users to retrieve any imaginable information. Creating a visual search request is a straightforward process, delivering the required data through a user-friendly interface.

The implementation has effectively addressed numerous challenges related to ensuring a secure internet connection for users.

When we conducted assessments, Cisco and Microsoft were also considered. However, at that time, Cisco was in the initial stages of developing their solution, and Microsoft had just released their web security gateway.

When making a decision, choosing a market leader is often advisable. While the initial cost may be slightly higher, the long-term savings in both time and money, as well as the reduction in operational costs, often outweigh the investment. Opting for a leading product can also mitigate potential issues and challenges that might arise with newer or less-established alternatives. Overall, I would rate it eight out of ten.

It serves as a globally distributed solution, differing significantly from MPLS. Unlike traditional firewalls, it seamlessly accommodates cloud services and enables remote work from any location. The product's global distribution across the cloud facilitates internal access with the necessary licenses. Whether connecting from a branch office, on-premises solution, private data system, public data center, or the cloud, the platform ensures consistent and robust security protection throughout the entire infrastructure.

The most valuable feature is its seamless integration capabilities, streamlining the process by eliminating the need for extensive installations. Users can connect to the SaaS solution by simply installing the necessary apps. This includes the flexibility to connect with any firewall or router capable of setting up IPSec, providing users the freedom to choose their preferred hardware. This versatility extends beyond Zscaler-specific applications or devices, making it compatible with a range of SD-WAN solutions, such as Cisco Meraki, Palo Alto, and Juniper.

A suggestion for improvement is the development of their own proprietary SD-WAN device. Currently, the experience can vary when integrating cloud protection with different vendors, such as Palo Alto, Meraki, or Juniper. Having a Zscaler-specific device could streamline this process and provide a more consistent user experience across diverse branches. Additionally, expanding their offerings to include solutions like SIEM, similar to competitors, could enhance their portfolio and cater to clients interested in a broader range of services.

I have been working with it for two years.

It is highly reliable and ensures that users receive optimal performance regardless of their physical location, creating a more seamless and user-friendly experience.

The initial setup was straightforward.

The perception of cloud services being expensive is often a result of the initial migration costs, especially when transitioning from traditional and limited MPLS environments. In the long run, cloud services are not inherently costly. If you're starting fresh and adopting a cloud-first approach from the beginning, the perceived expense is considerably less significant.

It is not economically viable for individual users but is highly recommended for companies with a substantial user base, multiple branches, extensive cloud operations, and remote employees. The solution offers enhanced protection across network, on-premises, and cloud environments, making it valuable for enterprises adapting to the evolving landscape of cloud adoption and seeking comprehensive security and networking benefits. Overall, I would rate it nine out of ten.

It pretty much covers, like, if you implement it, it's going to cover, like, 80 to 90% of real estate for the organization.

On DLP terms, Zscaler Cloud DLP ensures that data doesn't go outside of the organization. So on the network level, Zscaler does a pretty good job.

The solution doesn't do a very good job of detection, but they definitely do a very good job of implementing the policies.

There is room for improvement in detection. From the detection perspective, like, how it detects the violations.

Another area of improvement is implementation through non-client connectors. The solution can be implemented in two ways. One uses the back file; the other one uses client connectors. So the client connector is pretty fast, but when it comes to non-client connectors and procedures, it's kind of delayed and slow. The policies don't reflect very soon. It takes, like, a day and, like, hours to get implemented. But if it's a client connector, it takes, like, two minutes. It's just so good.

In future releases, I would like to see two things. It's not more of a feature but more like an enhancement. So I would like to see an enhancement in their proximity when detecting credit card details and past support details, and PII data.

Another area of improvement is support. 

I have been using this solution for around nine months. I use the latest version 6.2.

I would rate the stability an eight out of ten.

Scalability is pretty good. I would rate the scalability a nine out of ten. 

There is room for improvement in support. 

Neutral

The initial deployment is pretty easy. That's pretty straightforward.

We have definitely seen an ROI. 

The price is a little bit on the higher side, especially if you are going to add, like, packs or bundles to your subscription. But otherwise, it's pretty decent.

I would suggest to keep your policies simple. Don't complicate them because it depends on your organization and how you set it up. So once you are doing it, just keep it clean and simple.

Overall, I would rate the solution an eight out of ten. 

The primary use case of SASE is for secure access, whether for public internet or private applications. Post-Covid, users are connecting from everywhere and need secure access with a good user experience. We deploy this solution to our customers. 

Safe access is a key valuable feature. The ability to secure data in terms of confidentiality is also a great feature. Instead of going through existing gateways or their networks, users get direct secure access to applications over the internet. Connectivity to the applications is also great.

Although it's good, the DX layer could be better if it had improved visibility. There is definitely scope to enhance that aspect. Some customers are looking for application connectivity over zero trust which is a concern for them. I believe it's in the Zscaler roadmap and we hope to see that in the near future. 

I've been providing this solution to our customers for a decade. 

There were initially some stability issues but the solution is now very stable.

The scalability is great and it's the biggest advantage of having any SaaS solution. We have all categories of customers and a mid-market enterprise board. Our client companies have users that range anywhere from 500 up to 5,000. 

The initial setup is not complex at all and easy to handle. Customers have to familiarize themselves with the solution and try it out themselves. Deployment usually takes a couple of weeks although it depends on use cases and complexity. There may also be dependencies from the network side which can add to the deployment time.